KRITIS & NIS2UmsG: New Rules for Critical Infrastructure IT
Germany's KRITIS framework for protecting critical infrastructure has just gone through its most significant overhaul in a decade. The NIS2 Implementation Act — Gesetz zur Umsetzung der NIS-2-Richtlinie, or NIS2UmsG — entered into force on 6 December 2025, substantially revising the BSI Act (BSIG) that has governed IT security obligations for critical infrastructure operators since 2009. For organisations operating in sectors like energy, water, healthcare, transport, or IT and telecommunications,…
read more
